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Period for Reply 



A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 1 33). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

Responsive to communication(s) filed on 08 November 2006 , 
2a)Q This action is FINAL. 2b)E0 This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 C D. 11, 453 O.G. 213. 

Disposition of Claims 

4) I3 Claim(s) 1-53 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) E3 Claim(s) 1-53 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10) D The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

1 1) D The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12) D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (f). 
a)D All b)D Some * c)D None of: 

1 .□ Certified copies of the priority documents have been received. 

2. D Certified copies of the priority documents have been received in Application No. . 

3. D Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received, ^^^^^^z/^^ 
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DETAILED ACTION 

The Request for Continued Examination has been accepted and entered. 

Response to Arguments 

Applicant's arguments, filed 1 1/08/06, with respect to Claim Objections, and the Oath 
have been fully considered and are persuasive. The Objections have been withdrawn. 

1 . Applicant's arguments filed 1 1/08/2006 have been fully considered but they are not 
persuasive. 

Applicant argues that combination of Li US 5,473,599, "Entity Authentication using 
public key cryptography" by Willam Daley, with inherent features being explained with 
Applied Cryptography by Schneier does not teach a "third type derivative". The 
applicant asserts that the third type derivative is not taught and is not compared to pre- 
defined information about said second switch. The examiner asserts, through use of 
Schneier, that the predefined information (Certificate A) contains a signature by the 
Certificate Authority that issued Certificate A. Then the certificate will be authenticated 
by comparing said signature of Certificate A by creating a new signature and comparing 
them. 
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Applicant argues with regards to the motivation of the combination of Li US 5,473,599 
with Daley "Entity Authentication using Public Key Cryptography". 
The examiner asserts that the motivation is that it is desirable to make a network system 
more secure, as stated, and that this knowledge is generally known to one of ordinary 
skill in the art. 

The rejection below is substantially similar to the previous office action. 

Claim Rejections - 35 USC § 103 
The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

Claim 1-19, 21-32, 34-53 is rejected under 35 U.S.C. 103(a) as being unpatentable 
over Li US 5,473,599 in view of "Entity Authentication using public key 
cryptography" William Daley 

As per claim 1, Li teaches a system of routers that communicate through hello messages 
and include authentication messages, (Col 3 lines 1-4, Col 10 line 65-Col 1 1 line 16). Li 
does not teach a strong authentication system. 
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Daley teaches a strong authentication protocol comprising: sending a secret fact (random 
nonce) from sender B to a receiver A, (page 21, 23). Daley states receiving a second 
type derivative (signature of A) of said first secret fact, pre-defined information 
(certificate of A with key information). Daley teaches that receiver B verifies second 
type derivative and secret fact, (page 23). Daley teaches that receiver B verifies the 
certificate or chain of certificates (page 23). 

Although Daley does not explicitly state the method of verification of the signature, the 
examiner takes official notice that it is well known in the art, (Applied Cryptography 
Schneier pg 38-39). Daley does not teach the method of certificate verification the 
examiner takes official notice that this is well known in the art, and that the issuing 
certificate authority signs the certificate creating a third type derivative (Applied 
Cryptography Schneier pg 574-576). 

It would have been obvious to one of ordinary skill in the art to use the authentication 
system of Daley with the routers of Li, because the strong authentication would enhance 
the security of the routers. 

As per claim 2, Li teaches the routers use the same protocols, which use the same ports, 
(Col 8 lines 4-7). 

As per claims 3, and 4, Daley teaches verifiying the digital signature, which includes 
reversing (decryption) and creating (hashing). 
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As per claim 5, Daley teaches that second type derivative is associated with second 
switch (A) (page 23). 

As per claim 6, Daley teaches a certificate or chain of certificates issued by a certificate 
authority (page 23). Daley teaches validation of said certificate. The examiner takes 
official notice that validation includes a certificate authority trusted by both parties in the 
authentication. 

As per claim 7, Daley teaches pre-defined information is a certificate that includes 
encryption key information, (pg 23). 

As per claims 8, 9, 24, 25, 38, 39, and 52 Daley teaches sending a one time random 
number as a first secret fact, (pg 22). 

As per claims 10, 23, 37, 50, and 51 Li teaches a system of routers that communicate 
through hello messages and include authentication messages, (Col 3 lines 1-4, Col 10 line 
65-Col 1 1 line 16). Li does not teach a strong authentication system. 
Daley teaches a strong authentication protocol comprising: sending a secret fact (random 
nonce B) from sender B to a receiver A, (page 21, 23). Daley states receiving a second 
type derivative (signature of A) of said first fact, pre-defined information (certificate of A 
with key information), and second fact (random nonce A). Daley teaches that B creates a 

first-type derivative (signature of B) of said second fact, and sends it to A, (page 24). 

« 

Daley teaches B sending first-type derivative, defined information (certificate of B with 
key information, and third type derivative), to A(pg 21, 24. Daley teaches A verifies first 
type derivative, and B verifies second type derivative. Daley teaches both A and B verify 
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the third type derivative. . Daley teaches that A and B verify the certificate or chain of 
certificates (page 23-25). 

Although Daley does not explicitly state the method of verification of the signature, the 
examiner takes official notice that it is well known in the art, (Applied Cryptography 
Schneier pg 38-39). Daley does not teach the method of certificate verification the 
examiner takes official notice that this is well known in the art, and that the issuing 
certificate authority signs the certificate creating a third type derivative (Applied 
Cryptography Schneier pg 574-576). 

It would have been obvious to one of ordinary skill in the art to use the authentication 
system of Daley with the routers of Li, because the strong authentication would enhance 
the security of the routers. 

As per claim 11, Daley teaches verifiying the digital signature, which includes reversing 
(decryption) and comparing. 

As per claim 12, Daley teaches verifying the signature which includes creating (hashing) 
and comparing. 

As per claims 13, 14, 15, 26, 27, 28, 40, 41, and 42, Daley teaches creating a second type 
derivative by creating a signature of a first fact. Schneier provides the method of creating 
a signature which is well known in the art. The method of which includes hashing the 
first fact and encrypting said hash with a private key, (Schneier pg 38-39). 
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As per claims 16, 29, and 43, Daley teaches defined information is a certificate that 
includes encryption key information, (pg 23). 

As per claims 17, 30, and 44, Daley teaches defined information is a certificate. Schneier 
provides the well known structure of the certificate which includes a public key, (pg 574). 

As per claims 18, 31, and 45 Daley teaches a certificate or chain of certificates issued by 
a certificate authority (page 23). Daley teaches validation of said certificate. The 
examiner takes official notice that validation includes a certificate authority trusted by 
both parties in the authentication. 

As per claims 19, 32, and 46 Daley teaches a certificate or chain of certificates issued by 
a certificate authority (page 23). Daley teaches validation of said certificate. The 
examiner takes official notice that validation includes a certificate authority trusted by 
both parties in the authentication. Schneier provides the well known method of 
verification which includes using a public key to check the signature created by the 
private key of the certificate authority, (pg 574-576). 

As per claims 21, 22, 34, 35, 36, 47, 48, and 49 Daley teaches validation of the defined 
information The examiner takes official notice that this is well known in the art, and that 
the issuing certificate authority signs the certificate creating a third type derivative, and in 
verification the private key signature is reversed (decrypted) and compared, (Applied 
Cryptography Schneier pg 574-576). 
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As per claim 53, Li teaches priority levels of the routers determine status (Col 2 lines 44- 
53). 

Claims 20, and 33 are rejected under 35 U.S.C. 103(a) as being unpatentable over Li 
US 5,473,599 in view of "Entity Authentication using public key cryptography" 
William Daley in view of JP02001148697A 

As per claims 20 and 33, Daley teaches that receiver B verifies the certificate or chain of 
certificates (page 23). 

Daley does not teach the method of certificate verification the examiner takes official 
notice that this is well known in the art, and that the issuing certificate authority signs the 
certificate creating a third type derivative (Applied Cryptography Schneier pg 574-576). 
It would have been obvious to one of ordinary skill in the art to use the authentication 
system of Daley with the routers of Li, because the strong authentication would enhance 
the security of the routers. 

Neither Daley or Li teach that the authority is the manufacturer of the device. 
JP02001 148687 teaches a manufacturer stores a certificate and manufacturer signature 
made by a private key on each device. (Abstract). 

It would have been obvious to one of ordinary skill in the art to use the method of 
JP02001 148697 because it allows every device to communicate safely over a channel 
with low reliability. 
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Conclusion 



Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Christopher J. Brown whose telephone number is 
(571)272-3833. The examiner can normally be reached on 8:30-6:00. 
If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on (571)272-6962. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 
Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published 
applications may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished applications is available through Private PAIR only. For 
more information about the PAIR system, see http://pair-direct.uspto.gov. Should you 
have questions on access to the Private PAIR system, contact the Electronic Business 
Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a USPTO 
Customer Service Representative or access to the automated information system, call 
800-786-9199 (IN USA OR CANADA) or 571-272-1000. 




Christopher J. Brown 



01/19/07 
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